Lucene search
UbuntuUSN-6129-1HistoryJun 01, 2023 - 12:00 a.m.
Avahi vulnerability
2023-06-0100:00:00
ubuntu.com
34
avahi
vulnerability
ubuntu 23.04
ubuntu 22.10
ubuntu 22.04 lts
ubuntu 20.04 lts
d-bus
denial of service
ipv4ll
daemon
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6
Confidence
High
EPSS
0
Percentile
5.1%
Releases
- Ubuntu 23.04
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- avahi - IPv4LL network address configuration daemon
Details
It was discovered that Avahi incorrectly handled certain DBus messages. A
local attacker could possibly use this issue to cause Avahi to crash,
resulting in a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.04 | noarch | avahi-daemon | < 0.8-6ubuntu1.23.04.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | avahi-autoipd | < 0.8-6ubuntu1.23.04.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | avahi-autoipd-dbgsym | < 0.8-6ubuntu1.23.04.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | avahi-daemon-dbgsym | < 0.8-6ubuntu1.23.04.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | avahi-discover | < 0.8-6ubuntu1.23.04.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | avahi-dnsconfd | < 0.8-6ubuntu1.23.04.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | avahi-dnsconfd-dbgsym | < 0.8-6ubuntu1.23.04.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | avahi-ui-utils | < 0.8-6ubuntu1.23.04.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | avahi-ui-utils-dbgsym | < 0.8-6ubuntu1.23.04.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | avahi-utils | < 0.8-6ubuntu1.23.04.1 | UNKNOWN |
References
Related
nessus
nessus
EulerOS 2.0 SP10 : avahi (EulerOS-SA-2023-2346)
2023-07-18 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM : Avahi vulnerability (USN-6129-2)
2023-07-25 00:00:00
CentOS 9 : avahi-0.8-15.el9
2024-02-29 00:00:00
alpinelinux
alpinelinux
CVE-2023-1981
2023-05-26 18:15:11
openvas
openvas
Huawei EulerOS: Security Advisory for avahi (EulerOS-SA-2023-2508)
2023-08-01 00:00:00
Debian: Security Advisory (DLA-3414-1)
2023-05-03 00:00:00
Ubuntu: Security Advisory (USN-6129-1)
2023-06-02 00:00:00
oraclelinux
oraclelinux
avahi security update
2023-11-17 00:00:00
avahi security update
2023-11-11 00:00:00
nvd
nvd
CVE-2023-1981
2023-05-26 18:15:11
redhatcve
redhatcve
CVE-2023-1981
2023-04-11 14:59:59
fedora
fedora
[SECURITY] Fedora 38 Update: avahi-0.8-22.fc38
2023-04-18 01:40:02
mageia
mageia
Updated avahi packages fix security vulnerability
2023-05-06 21:19:07
redos
redos
ROS-20240404-09
2024-04-04 00:00:00
osv
osv
Moderate: avahi security update
2023-11-14 00:00:00
avahi - security update
2023-05-02 00:00:00
avahi vulnerability
2023-06-01 14:51:17
rocky
rocky
avahi security update
2023-11-28 22:42:52
prion
prion
Design/Logic Flaw
2023-05-26 18:15:00
amazon
amazon
Medium: avahi
2023-07-20 17:29:00
ubuntucve
ubuntucve
CVE-2023-1981
2023-04-12 00:00:00
debiancve
debiancve
CVE-2023-1981
2023-05-26 18:15:11
redhat
redhat
(RHSA-2023:7190) Moderate: avahi security update
2023-11-14 08:47:30
(RHSA-2023:6707) Moderate: avahi security update
2023-11-07 06:12:33
ubuntu
ubuntu
Avahi vulnerability
2023-07-25 00:00:00
veracode
veracode
Uncontrolled Resource Consumption
2024-03-17 17:27:08
debian
debian
[SECURITY] [DLA 3414-1] avahi security update
2023-05-02 21:00:31
cve
cve
CVE-2023-1981
2023-05-26 18:15:11
cvelist
cvelist
CVE-2023-1981
2023-05-26 00:00:00
almalinux
almalinux
Moderate: avahi security update
2023-11-14 00:00:00
Moderate: avahi security update
2023-11-07 00:00:00
ibm
ibm
hp
hp
HP ThinPro 8.0 SP 7 Security Updates
2024-01-26 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6
Confidence
High
EPSS
0
Percentile
5.1%
Related for USN-6129-1